Google’s TAG specializes in hunting APTs revealed that a government-sponsored hacking group from North Korea targeted the security experts who were connected with vulnerability research.
The attackers used fake social media account to reach out to the victims. They also created websites in the name of fake companies which provide penetration testing services.
These are not the first time that these types of attacks have happened.
The main motive behind these attacks is to steal the data of the research works. These stolen data can be exploited and used in future attacks. Therefore the security researchers must stay careful of any unknown person or any unauthorized access from social media.